General

  • Target

    HAN LLEGADO LOS DOCUMENTOS ADJUNTOS-password(v6Z3UoEi).zip

  • Size

    889KB

  • MD5

    bab1852ac639b0288b8b1127c9a488ce

  • SHA1

    4d96008edf7ec659ada6c007307f9adcd82a4a1b

  • SHA256

    63784f25a485944de47297b410a86ef06d87908700b0d91da9ac38c5121f0767

  • SHA512

    b9df30d0361cf3d4ebc92185ccee5607fd9d111052e118b784fb535251a5b4cbf2d6f72b7834961d343ee442b68935102d5d32d547c6f75512a3b9284d7b40d1

  • SSDEEP

    24576:aKrZ4L8W7yUau9M+5EDI5nrE8ZOAN9nkjf:l2wZiM+5E8l9bnkL

Score
5/10

Malware Config

Signatures

  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • HAN LLEGADO LOS DOCUMENTOS ADJUNTOS-password(v6Z3UoEi).zip
    .zip

    Password: v6Z3UoEi

  • 4153d78e31eddbc21325cde2804858412a2129590615af8c8bca1007d45b969a.eml
    .eml

    Password: v6Z3UoEi

    • http://www.dhl.com.mx/en/contact_center/contact_express.html

    • http://www.dhl.com.mx/en/express.html

    • http://www.dhl.com.mx/es/centro_de_contacto/contacto_express.html

    • http://www.dhl.com.mx/es/express.html

    • https://del.dhl.com/MX/uODuEMvPPoNb?locale=es-MX

    • https://unsubscribe.dhl.com/MX/unsubscribe_email.xhtml?ctry=7mR0aeJ7FXE30KR4HvCCxQ&contact=YXUQVbHQ96JxklPedmiEpkZFZwdyU8TDl6B3oDRa-wsQvJAy-qGcw31G16XIz5Oq&langcode=es&locale=en-MX

    • https://unsubscribe.dhl.com/MX/unsubscribe_email.xhtml?ctry=7mR0aeJ7FXE30KR4HvCCxQ&contact=YXUQVbHQ96JxklPedmiEpkZFZwdyU8TDl6B3oDRa-wsQvJAy-qGcw31G16XIz5Oq&langcode=es&locale=es-MX

    • https://www.logistics.dhl/mx-en/home/footer/local-privacy-notice.html

    • https://www.logistics.dhl/mx-es/home/pie-de-pagina/aviso-de-privacidad.html

  • COMPROBANTE FAC PAG 1312025pdf.zip
    .zip

    Password: v6Z3UoEi

  • COMPROBANTE FAC PAG 1312025pdf.exe
    .exe windows:5 windows x86 arch:x86

    Password: v6Z3UoEi

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections

  • email-html-1.txt
    .html